[00:08.800 --> 00:17.840]  Well, good morning. Thank you everyone for coming here to this beta of DEFCON China. It's been pretty exciting. It's been great to be here as well.
[00:18.940 --> 00:29.940]  So I'm Zoz, and this talk is about forensic-resistant data destruction with a constraint of one minute, and I'll get into all the details.
[00:30.920 --> 00:39.760]  First of all, though, because we're hackers, we like to give respect to those that helped us out along the way, especially with some old-school antsy art.
[00:39.760 --> 00:47.220]  So this is my thanks slide to everyone that helped me with this project. I had a ton of help with this. You'll see from what I'll show you.
[00:47.300 --> 00:53.320]  With the photography, visuals, getting all the licenses and permits, and the substances required for this.
[00:53.320 --> 00:57.300]  So, big shout-out to all those other hackers out there that helped me with this.
[00:58.140 --> 01:06.800]  But here's the motivation for this work. The motivation is the security aspects of the things that we throw away.
[01:06.800 --> 01:13.540]  The stuff we throw in the trash. Some of us who have been around for a while remember going trashing.
[01:13.540 --> 01:23.960]  The old-school industrial espionage. Getting the secrets that people didn't want their competitors, or criminals, or the general public to know.
[01:23.960 --> 01:27.920]  We used to go through the trash. It's just like a lot of things that people throw away.
[01:28.260 --> 01:33.260]  Old phone system manuals, like the freakers used to go and get.
[01:33.280 --> 01:36.640]  Looking for passwords and stuff in the dumpster.
[01:37.480 --> 01:42.060]  But now, the stuff that gets thrown away is increasing exponentially.
[01:42.060 --> 01:44.500]  So we're not just looking for printouts anymore.
[01:45.380 --> 01:50.840]  We can hold in our hands a device that contains terabytes of information.
[01:50.920 --> 01:53.200]  And that stuff does get thrown out.
[01:53.200 --> 01:56.860]  So here are some examples of where we see that security risk happening.
[01:57.960 --> 02:02.000]  Printers and copiers, right? They're all digital now. They used to be fully optical.
[02:02.220 --> 02:07.860]  But now they scan because you can email the PDF to yourself later. You can go to these copiers and stuff.
[02:07.860 --> 02:15.020]  And so there's a lot of research out there on recovering old copiers and printers and then recovering interesting information from the hard disks.
[02:15.020 --> 02:21.220]  There's actually a big report out in the United States just yesterday from a news group that went out and saw that this is still a problem.
[02:21.220 --> 02:27.640]  They recovered all these confidential medical reports, sensitive information, that were still stored.
[02:27.640 --> 02:34.640]  Some printers don't even erase the documents that are stored on a disk until they need it or the rest of it is recoverable.
[02:34.980 --> 02:43.800]  Another example that's coming increasingly into prominence, even in civilian circles, is sensitive information in devices that don't stay put.
[02:43.840 --> 02:48.300]  Your drone aircraft might contain all kinds of information.
[02:48.300 --> 03:01.120]  Your driverless car might contain all kinds of private information or information that a company considers their proprietary information.
[03:01.120 --> 03:05.860]  So like Google's maps or whatever might be in the driverless car if you can get access to that hard disk.
[03:05.860 --> 03:10.580]  So we have to care about this media that goes for a ride somewhere.
[03:11.280 --> 03:18.160]  But the point of this research really is what if someone tries to take that data from you when you're still using it?
[03:18.160 --> 03:23.340]  So you're not throwing it away. You're still using it.
[03:23.340 --> 03:30.900]  And so this was originally inspired by some work that was presented at Epcon19 by Shane Lawson, Bruce Potter, and Damian Marlam.
[03:30.900 --> 03:33.700]  Great presentation. So that's how I lost my eye.
[03:33.800 --> 03:38.020]  They were working with some data center scale stuff and they had this thought experiment.
[03:38.020 --> 03:40.360]  What if we needed to get rid of this really fast?
[03:41.200 --> 03:43.380]  So here are the goals for the research.
[03:43.780 --> 03:46.620]  We want to be able to flip a switch and have our drives gone.
[03:46.620 --> 03:48.440]  Not a single bit left standing.
[03:49.360 --> 03:54.260]  Now you might say, well, hey, all my drives are encrypted, right? So I just don't care.
[03:55.880 --> 04:01.380]  The crypto doesn't necessarily save you because crypto is literally as strong as the security of your key.
[04:01.380 --> 04:03.660]  And the key has to be still at some point.
[04:03.660 --> 04:07.320]  And you may be surprised by where your key ends up.
[04:07.320 --> 04:11.280]  In particular, it can be unexpectedly recoverable for your physical media.
[04:11.580 --> 04:13.940]  So we just need to be careful about this.
[04:13.940 --> 04:16.220]  And the other thing, of course, data center scale that I mentioned.
[04:16.220 --> 04:18.380]  We want to be able to destroy a lot of drives quickly.
[04:18.860 --> 04:23.220]  And we're going to also consider as our threat model the ultimate adversary.
[04:23.220 --> 04:29.540]  An extremely high capability criminal adversary like a bad nation state intelligence service.
[04:29.540 --> 04:32.140]  So it has the maximum forensic capabilities.
[04:32.800 --> 04:35.480]  So let's take a look at what's done industrially first.
[04:35.480 --> 04:40.960]  This is what we're competing with if you work for a company and you need to get rid of your data securely.
[04:40.960 --> 04:45.500]  So if you want to decommission your disk, then the standard method is you degauss the drive,
[04:45.500 --> 04:49.800]  if it's a magnetic storage system, and then you throw it into some giant industrial shredder like that.
[04:49.800 --> 04:52.340]  That reduces it to a lot of little component parts.
[04:52.660 --> 04:55.040]  The good thing here is also they're all mixed together.
[04:55.680 --> 04:58.960]  So once again, if you're destroying something, you have to predict your adversary.
[04:59.440 --> 05:04.380]  So what we know is that forensic organizations with unlimited funding,
[05:04.380 --> 05:06.660]  I think you probably know who I'm talking about,
[05:06.660 --> 05:12.600]  they are able to exploit physically destroyed drives that have been collected.
[05:12.600 --> 05:17.380]  So as part of this research, I talked to military intelligence officials from the United States
[05:17.380 --> 05:24.000]  who had been in Iraq collecting data, and they were under instructions that if they found any physical media,
[05:24.000 --> 05:27.760]  no matter its physical condition, no matter how it had been physically destroyed,
[05:27.760 --> 05:31.720]  they would collect that and send it in as long as it had not also been burnt.
[05:31.720 --> 05:38.320]  So we know that there are capabilities out there to recover some information from even physically destroyed drives.
[05:38.620 --> 05:43.000]  So here's your takeaway at home, if you want to destroy your own stuff,
[05:43.000 --> 05:46.640]  if you want to really nuke it from orbit, you should degauss your drive,
[05:46.640 --> 05:50.220]  you should then crush and shred it, and then you should burn the remnants,
[05:50.220 --> 05:54.200]  and then if you're really paranoid, you should throw those remnants away in separate places.
[05:54.200 --> 05:56.380]  Just split them up, right? Really make things difficult.
[05:57.280 --> 05:59.960]  But here are the rules for the research I'm going to present today.
[05:59.960 --> 06:03.980]  These are adapted pretty much straight up from the DEF CON 19 presentation.
[06:04.520 --> 06:07.760]  We have one U for our server containing all our drives.
[06:07.900 --> 06:12.800]  We have one U above and below that in our rack for whatever we want to put in there for protection.
[06:12.800 --> 06:17.560]  So that means we can have hot gas extraction, we can have just slabs of concrete,
[06:17.560 --> 06:21.160]  anything we want to contain what we're doing here.
[06:21.180 --> 06:23.640]  We have 60 seconds to get to completion.
[06:24.080 --> 06:28.140]  We want to not set off our fire system, right, because we don't want sprinklers going off,
[06:28.140 --> 06:31.340]  we don't want halon systems flooding the room.
[06:31.580 --> 06:34.700]  We want to contain our damage within our storage equipment,
[06:34.700 --> 06:37.960]  because we don't want to damage neighboring equipment,
[06:37.960 --> 06:40.560]  and we also don't want to damage neighboring humans,
[06:40.560 --> 06:43.100]  whoever's in the data center, so we want to keep them safe.
[06:43.100 --> 06:44.240]  So those are the rules.
[06:45.260 --> 06:49.240]  Let's take a look at what we're trying to destroy here, what hard disks are made out of.
[06:49.420 --> 06:53.760]  Most of the drives you'll find still in a data center are made out of spinning platters.
[06:54.900 --> 06:58.320]  And those platters are made usually of aluminum.
[07:00.460 --> 07:05.020]  And increasingly now, especially in laptop computers, they're made of glass.
[07:05.080 --> 07:06.820]  Glass is very easy to destroy.
[07:06.820 --> 07:11.320]  The reason they're made of glass, by the way, is because it's really easy to make a very flat platter
[07:11.320 --> 07:13.320]  that you can spin at a high rate of speed.
[07:14.040 --> 07:16.540]  That sort of machining problem can be easier with glass.
[07:16.720 --> 07:20.340]  But mostly in the data center we'll see aluminum, and that's what I'm going to concentrate on,
[07:20.340 --> 07:21.920]  because glass smashes very easily.
[07:21.920 --> 07:26.580]  The surface coating, the aluminum doesn't store anything, it's just a substrate.
[07:26.580 --> 07:30.100]  The coating, we have underlayers of cobalt, nickel, and iron.
[07:30.200 --> 07:34.580]  And then we have the magnetic alloy, which is cobalt, chromium, and platinum.
[07:34.580 --> 07:38.200]  So we actually have some valuable metals inside a hard disk.
[07:38.220 --> 07:42.260]  And those layers are separated by four atoms of ruthenium.
[07:42.260 --> 07:47.720]  Very, very thin coating, but nevertheless, that coating makes them extremely chemically resistant.
[07:47.800 --> 07:49.420]  Ruthenium is pretty unreactive.
[07:49.420 --> 07:52.180]  So that's why I haven't covered chemical attacks here.
[07:52.680 --> 07:55.240]  Then also a little bit at the end on solid-state drives.
[07:55.240 --> 07:59.380]  A solid-state drive is nothing special in terms of its physical design.
[07:59.380 --> 08:02.300]  It's just a bunch of high-performance flash chips soldered to a circuit board.
[08:02.300 --> 08:05.540]  So any method that works on circuitry will work on an SSD.
[08:06.540 --> 08:08.940]  So let's look at the methods that I'm going to cover here.
[08:08.980 --> 08:11.600]  I'm going to look at thermal attacks using heat.
[08:11.660 --> 08:15.020]  I'm going to look at kinetic attacks using physical force.
[08:15.080 --> 08:16.740]  And electric attacks.
[08:18.100 --> 08:19.440]  First up, thermal.
[08:19.500 --> 08:26.820]  So our goal here is that we want to exceed the temperature at which the stabilized spins of our magnetic material,
[08:26.820 --> 08:30.160]  that are aligned and storing our magnetic data, become disorganized.
[08:30.160 --> 08:31.740]  That's called the Curie point.
[08:31.880 --> 08:36.480]  So for cobalt, which is what we care about here, that's a little bit above 1000 C.
[08:36.480 --> 08:37.680]  That's pretty hot.
[08:37.760 --> 08:41.420]  So for each of these sections, I'm going to tell you what I didn't try.
[08:41.420 --> 08:47.900]  So in this case, I didn't try flame torches, because Bruce and Shane and Evian covered that at DEFCON 19.
[08:48.180 --> 08:51.660]  Flameless chemical reactions I was pretty excited for, and I did some research there.
[08:51.660 --> 08:53.800]  I couldn't find any that got hot enough.
[08:54.640 --> 08:56.140]  An electric oven.
[08:56.420 --> 09:00.500]  You know, we've got time constraints for our minute, and then also it's just not that interesting.
[09:00.880 --> 09:02.820]  And then inductive heating or melting.
[09:02.820 --> 09:07.320]  Just like an inductive foundry works when you're melting down your metal to cast it.
[09:07.320 --> 09:10.080]  I didn't look at this because we know it works.
[09:10.080 --> 09:13.880]  And then secondly, there's a lot of infrastructure that's required for those things.
[09:13.900 --> 09:17.360]  Your little inductive furnace has a giant power supply.
[09:18.100 --> 09:22.560]  So first of all, I went into my workshop and said, well, let's start off with thermal.
[09:22.560 --> 09:24.520]  What's the hottest thing I have in the workshop?
[09:24.520 --> 09:26.260]  Let's give it a shot with a plasma gun.
[09:29.200 --> 09:35.120]  We've got a nice high-temperature jet of electrified plasma coming out of the thing.
[09:35.120 --> 09:40.660]  You can cut through a pretty much unlimited section of steel with these guys.
[09:40.660 --> 09:45.540]  You know, if you want to cut up an inch or two of steel plate, this is a great thing to have in the shop.
[09:46.100 --> 09:49.500]  So, just dump a ton of heat into this guy.
[09:49.600 --> 09:55.040]  And a good thing about this here too is you get a little flame out of the back side to know that it's done.
[09:55.040 --> 09:57.580]  You'll see that coming out of the bottom just there.
[09:58.320 --> 10:01.260]  And some globs of molten metal coming out as well.
[10:03.080 --> 10:05.860]  Just like the timer on the microwave.
[10:05.860 --> 10:07.800]  So, like the ding when you're done.
[10:07.800 --> 10:09.680]  45 seconds, less than a minute.
[10:09.720 --> 10:11.460]  So, looking pretty good.
[10:11.460 --> 10:13.840]  So, let's open up the drive and take a look.
[10:14.200 --> 10:17.500]  You can see here, the screws have already been taken out.
[10:17.500 --> 10:22.700]  And I'm wearing gloves now because I burned myself several times trying to get this hot disc open.
[10:22.700 --> 10:24.740]  It takes a long time to cool down.
[10:24.740 --> 10:25.840]  It got really hot.
[10:25.940 --> 10:30.400]  You can see here, the drive was spinning when I started this up.
[10:30.400 --> 10:32.540]  And you can see that reaming.
[10:32.580 --> 10:33.660]  Here's another look at that.
[10:33.880 --> 10:35.700]  Showing damage to the surface of the drive.
[10:35.700 --> 10:37.420]  But it stopped spinning pretty quickly.
[10:37.420 --> 10:39.880]  So, as it heated up, that spindle seized.
[10:39.980 --> 10:42.000]  And we didn't have any spin anymore.
[10:42.000 --> 10:43.740]  But we cut a nice hole in the disc.
[10:43.740 --> 10:45.140]  And here we go.
[10:47.640 --> 10:49.060]  Looking at the platys underneath.
[10:49.060 --> 10:51.300]  And you can see that hole goes all the way through.
[10:51.300 --> 10:53.520]  And there is the whole package.
[10:53.620 --> 11:00.080]  So, what we can see from this is that although we couldn't rely on the spin of the disc to destroy the whole thing.
[11:00.080 --> 11:02.020]  We definitely destroyed that platter nicely.
[11:02.020 --> 11:05.800]  So, what we would need is a ring of plasma ejectors.
[11:05.800 --> 11:06.920]  Very easy to make.
[11:06.920 --> 11:08.740]  We could totally fabricate something like that.
[11:08.740 --> 11:11.260]  So, this is an extremely feasible method.
[11:11.700 --> 11:12.380]  Great.
[11:12.380 --> 11:14.840]  So, I'm feeling pretty excited here.
[11:16.480 --> 11:19.540]  And I feel like my research is off to a good start.
[11:20.340 --> 11:24.400]  But, I got to thinking, well, these platters are made of aluminum.
[11:24.440 --> 11:26.840]  Aluminum is an extremely reactive metal.
[11:26.840 --> 11:30.760]  Actually, you just can't really tell because it's normally covered in a protective oxide coating.
[11:31.100 --> 11:34.700]  So, what if we could use the drive itself as the fuel.
[11:34.700 --> 11:37.220]  And all we would need is to push in an oxidizer.
[11:37.220 --> 11:39.340]  And then have everything take place.
[11:39.340 --> 11:43.640]  So, I thought, well, we could think about a nozzle that pierces the drive and pump oxygen in.
[11:43.640 --> 11:45.020]  We just need to get it going.
[11:45.180 --> 11:47.460]  So, I built up a little oxygen injector rig here.
[11:47.460 --> 11:49.480]  And you can see the wires off to the side.
[11:49.500 --> 11:52.940]  Which has a little tiny igniter in there just to get things going.
[11:53.260 --> 11:54.720]  And here we go.
[11:59.940 --> 12:01.900]  You can see the igniter goes off.
[12:02.240 --> 12:03.860]  Oxygen is pumping in.
[12:06.580 --> 12:08.460]  Getting a lot of flame out of it.
[12:08.460 --> 12:13.400]  And, in fact, we just had to stop because you can see that the oxygen tube is melting.
[12:13.500 --> 12:16.040]  And we were worried about starting a fire we couldn't control.
[12:16.040 --> 12:18.620]  So, we thought, well, we better start the safety first, right?
[12:19.460 --> 12:23.240]  So, here we are with some high speed footage of this.
[12:23.240 --> 12:31.120]  As you can see, the little igniter wire goes off and immediately things go gangbusters inside that drive, right?
[12:31.120 --> 12:38.160]  Oxygen is one of the most reactive things you can pump into a system.
[12:38.720 --> 12:41.480]  And plenty of heat coming out here.
[12:41.480 --> 12:43.780]  There's a lot of combustion going on on this drive.
[12:43.780 --> 12:45.120]  So, this looks pretty good.
[12:45.340 --> 12:47.880]  Let's take a look inside it.
[12:48.560 --> 12:50.380]  And, well, here's the outside.
[12:50.380 --> 12:54.500]  You can see, once again, there's no fuel in there except for the drive itself.
[12:54.500 --> 12:57.580]  So, everything's being provided by the unit.
[12:57.980 --> 13:00.960]  And open it up and you can see a lot of combustion has happened in there.
[13:00.960 --> 13:09.800]  And if we had been less experimental about this, if we'd used the metal tube for our oxygen, this thing would have consumed the entire drive.
[13:09.940 --> 13:11.780]  So, there we are with the drive cleaned.
[13:11.780 --> 13:14.780]  And you can see we've really started to combust that black, right?
[13:14.780 --> 13:20.660]  So, despite the fact that the coating is chemically unreactive under normal circumstances,
[13:20.660 --> 13:23.880]  pretty much everything oxidizes and so we're just going to eat away at that drive.
[13:23.880 --> 13:24.900]  No problem at all.
[13:24.900 --> 13:27.300]  So, this method potentially was feasible.
[13:27.300 --> 13:29.660]  I figured this shows what we need to do.
[13:29.660 --> 13:32.380]  There wasn't a need for further experimentation there.
[13:32.780 --> 13:38.640]  But, you know, what I really was getting at here when I started the thermal attacks
[13:38.640 --> 13:43.440]  is because when you talk to anyone about how to destroy hard disks conveniently,
[13:43.440 --> 13:46.460]  pretty much everyone has a one-word response to that.
[13:46.460 --> 13:48.420]  They're like, oh, thermite.
[13:48.820 --> 13:54.340]  So, I was like, yeah, alright, we think this is going to work, but who's really tried it?
[13:54.340 --> 13:56.480]  Who out there that says thermite has really tried it?
[13:56.480 --> 13:57.620]  I certainly haven't.
[13:57.620 --> 13:59.140]  So, let's take a look.
[13:59.140 --> 14:02.920]  But we know that the military uses thermite as a data destruction method.
[14:02.920 --> 14:05.000]  They make these thermite incendiary hand grenades.
[14:05.000 --> 14:11.160]  They're actually issued for the purposes of getting rid of sensitive stuff and equipment.
[14:11.160 --> 14:15.640]  And what I really wanted to do here was I wanted to make thermite into some kind of a paste or slurry
[14:15.640 --> 14:21.720]  that I could inject into the drive when necessary, fill it up in a few seconds, set it off, boom, right?
[14:21.720 --> 14:23.140]  This was going to be totally awesome.
[14:23.660 --> 14:24.880]  Unfortunately, this failed.
[14:24.880 --> 14:28.860]  I don't have time to show you those failures, but they're not very exciting because they're failures.
[14:30.060 --> 14:33.300]  But anyway, here's what thermite is.
[14:33.640 --> 14:35.980]  Anyone that's taken high school chemistry probably remembers.
[14:35.980 --> 14:41.780]  It's a standard oxygen swap reaction between aluminum metal and iron oxide.
[14:41.780 --> 14:48.000]  That oxygen just changes hardness like it's at a swing dance and the aluminum becomes oxidized.
[14:48.000 --> 14:51.440]  You get molten iron out of it and a lot of energy.
[14:51.800 --> 14:59.100]  So, 2500 C is the theoretical temperature you can reach with a block of thermite.
[14:59.480 --> 15:04.160]  So, if you want to make this at home, that's the ratio, 3 to 1 by weight.
[15:04.160 --> 15:06.600]  And let's give it a shot.
[15:06.880 --> 15:12.240]  So, my first experiment here was, well, looking inside a hard disk,
[15:12.240 --> 15:16.520]  there's sort of quite a lot of empty space that's not needed right there behind those read heads.
[15:16.720 --> 15:21.700]  So, even though my slurry injection is not going to work, maybe I can just modify my drive to put stuff in there.
[15:21.720 --> 15:26.720]  And the other good thing is, there's some of the pins on the drive bus that aren't used.
[15:26.720 --> 15:30.220]  So, I can use some of those pins to make a little electric igniter
[15:31.480 --> 15:37.680]  and put in my 15 gram baggie of thermite, seal the drive up, and it actually still works.
[15:37.680 --> 15:42.500]  There's no, you know, if you're careful about it, you don't get things too messy in there.
[15:43.080 --> 15:47.660]  Great. So, here we are with our 15 grams of thermite, real time.
[15:56.160 --> 15:58.900]  Doesn't look like it's going to be a containment problem, right?
[15:58.900 --> 16:01.380]  A little bit of flame there, we can deal with that, no problem.
[16:01.380 --> 16:07.140]  So, here's what it looked like after that, and definitely things got hot in there.
[16:07.140 --> 16:16.860]  This looks pretty melty, but as soon as we start taking a closer look, we can see a lot of this is just dust and debris.
[16:17.240 --> 16:20.780]  There's nothing that a forensic lab couldn't deal with pretty easily.
[16:21.680 --> 16:26.880]  Here we are with a fully clean disk, and there's basically no damage to it at all.
[16:26.880 --> 16:33.140]  Sure, the electronics is cactus, but the platters themselves, you know, no problem at all.
[16:33.140 --> 16:40.100]  I wouldn't trust that. I wouldn't trust my life to the data being un-extractable from that.
[16:40.100 --> 16:41.700]  So, that's a fail.
[16:42.320 --> 16:46.600]  But I'm not ready to give up on thermite yet, because everyone knows that's the way to do it.
[16:46.600 --> 16:53.060]  So, you know, taking a closer look at those military grenades, they actually don't use regular, straight up thermite.
[16:53.060 --> 17:00.420]  They actually use a variant called thermate, which is regular thermite, 70%, and then 30% of barium nitrate.
[17:00.420 --> 17:08.820]  The barium nitrate actually increases the burning temperature, and it also produces gas, and the gas throws everything around.
[17:08.880 --> 17:13.680]  So, you know, it just makes everything a bit more violent. That's what we want here.
[17:13.680 --> 17:18.180]  So, here's another 15 grams of thermate here inside a garage.
[17:19.940 --> 17:26.520]  And we can see just from that real-time footage that we have a lot more violent of a reaction going on here.
[17:26.520 --> 17:33.900]  Here we are with a high-speed shot. This was just taken with an off-the-shelf Sony DS camera or something like that.
[17:33.900 --> 17:36.040]  I think it's about 240 frames per second.
[17:36.280 --> 17:44.000]  But we can see we're getting a nice little pyrotechnic show here, squeezing out from under the top of the drive.
[17:44.000 --> 17:47.760]  So certainly we're going to have to think about our pyrotechnic containment here.
[17:48.200 --> 17:57.680]  But, you know, we're definitely kicking it up a notch with the kind of violence that we want here from our substance.
[17:58.200 --> 18:00.800]  For time constraints, I'm going to click ahead.
[18:02.220 --> 18:06.020]  So here we are opening it up, wearing my gloves.
[18:07.060 --> 18:13.080]  And, wow, we can immediately see that something a bit more violent has gone on inside that dish.
[18:14.080 --> 18:20.680]  Yeah, that's quite impressive compared to the straight-up thermite.
[18:20.680 --> 18:23.180]  I guess there's a reason why the military uses this formula.
[18:23.180 --> 18:26.420]  See, you can see I was impressed at the time when I saw that.
[18:27.140 --> 18:29.240]  So let's take a closer look.
[18:29.240 --> 18:37.080]  We can see here that that molten iron that's been produced by the thermite has really been spread out everywhere, all those little beads.
[18:37.720 --> 18:41.480]  And once we clean it off, we can see a few interesting things here.
[18:41.480 --> 18:45.760]  We can see that we've globbed molten iron onto the reed heads.
[18:45.960 --> 18:49.600]  We can see that we've actually delaminated the platter here.
[18:49.600 --> 18:54.080]  That's great. We know we're getting up to the temperatures we need when we're doing that.
[18:54.380 --> 18:57.360]  And we can see we've welded the platters together too.
[18:57.640 --> 18:59.320]  So things look pretty good.
[18:59.460 --> 19:03.620]  But the rest of that platter still looks in pretty good shape.
[19:03.620 --> 19:09.100]  So I think even though we're getting one side of it hot enough, I'm not confident enough about the other side.
[19:09.100 --> 19:15.180]  So we're being like honest scientists here. We're going to call this a fail.
[19:16.840 --> 19:19.280]  Well, there are other types of thermite.
[19:19.280 --> 19:23.280]  I'm not ready to give up on thermite yet because everyone says that's the way to go.
[19:23.280 --> 19:29.020]  And so one such variant that I forget about is copper thermite.
[19:29.080 --> 19:32.900]  This is a similar reaction. We use copper oxide instead of iron oxide.
[19:33.360 --> 19:38.920]  And once again, for those following along at home, if you want to make it 4.4 to 1,
[19:38.920 --> 19:40.960]  copper oxide to aluminum by weight.
[19:41.180 --> 19:45.720]  Now copper thermite is a very aggressive thermite.
[19:45.720 --> 19:49.680]  So here's a little unconfined pile for the torch.
[19:52.340 --> 19:56.520]  Fast, right? We're almost at gunpowder speed there.
[19:57.000 --> 20:00.180]  So hey, let's do it. Let's put it in there and see how it looks.
[20:06.520 --> 20:07.480]  Boom.
[20:08.280 --> 20:12.860]  So I want you to keep watching this, even though there's this giant cloud of smoke.
[20:13.880 --> 20:17.340]  Keep watching down in the lower right of the screen here.
[20:17.340 --> 20:20.720]  There's the top of the drive that flew off, right?
[20:20.720 --> 20:23.040]  So it just busted those screws right out.
[20:23.220 --> 20:25.660]  But keep watching. There's more to come.
[20:30.350 --> 20:33.190]  And there it is. There's the drive itself.
[20:33.810 --> 20:38.850]  So from a standing start on top of that cinder block,
[20:38.850 --> 20:41.470]  it rebounded up several feet in the air,
[20:41.470 --> 20:44.330]  also produced a giant cloud of toxic smoke,
[20:44.330 --> 20:47.330]  and Miles and I had to run out of his laboratory into the street
[20:47.330 --> 20:49.430]  and explain ourselves to his neighbors.
[20:49.430 --> 20:50.910]  So a little bit embarrassing.
[20:51.050 --> 20:53.010]  But let's take a look at how it looked.
[20:53.130 --> 20:54.790]  Here is the top plate.
[20:54.790 --> 20:59.070]  You can see where the screws ripped through on the corners
[20:59.070 --> 21:03.890]  and beautiful patina on the plate itself.
[21:03.890 --> 21:09.910]  So totally a valid method for people interested in doing pyrotechnic art.
[21:10.590 --> 21:13.090]  Here's the disk itself.
[21:13.090 --> 21:17.490]  Also looks kind of like a steampunk hard disk now.
[21:17.490 --> 21:18.870]  Very Victorian.
[21:20.030 --> 21:24.330]  A closer look there, we can see lots of stuff has gone.
[21:24.330 --> 21:29.330]  We've certainly spewed material all through the drive.
[21:30.770 --> 21:32.470]  Let's take a closer look over here.
[21:32.470 --> 21:37.750]  We can see we've made beads of elemental copper that are stuck all over the place.
[21:37.750 --> 21:41.250]  You can take a look here and see all these little bits of copper.
[21:41.250 --> 21:47.530]  And you know, you kind of feel intuitively like covering electronics in copper probably isn't good for them.
[21:49.010 --> 21:52.530]  I'll get to see if there's some more nice beads of copper there in the corner.
[21:53.550 --> 21:55.670]  So once again, we open it up.
[21:55.670 --> 21:59.930]  We use our extremely scientific forensic cleanup lab,
[21:59.930 --> 22:01.970]  which is on the side of Miles' photo lab.
[22:02.530 --> 22:06.150]  And, wow, it cleans up pretty good.
[22:09.910 --> 22:11.530]  There's a little close-up shot.
[22:11.530 --> 22:14.590]  So we can see there's definitely some copper that's stuck to things.
[22:14.590 --> 22:19.070]  But even though we might feel intuitively that copper is not good for electronics,
[22:19.070 --> 22:21.630]  we're not really talking about electronics here inside the drive.
[22:21.630 --> 22:23.110]  It's not the bits that we care about.
[22:23.110 --> 22:25.950]  We're talking about magnetic storage, and copper is not magnetic.
[22:25.950 --> 22:33.650]  So your sufficiently motivated forensic organization could easily polish that copper off again.
[22:33.650 --> 22:36.810]  And I don't think this is going to work for you.
[22:36.810 --> 22:40.830]  So I class this as infeasible, but a lot of fun.
[22:41.710 --> 22:45.210]  But I'm still not ready to give up on thermite.
[22:45.210 --> 22:49.730]  Because when you ask someone how to destroy drives, they always say thermite.
[22:49.730 --> 22:59.470]  So I'm going to make a case, and I'm going to pack as much thermite in as I can fit in our 1U server with the drive.
[22:59.730 --> 23:04.330]  So this stack here, that's exactly 1U in height.
[23:04.590 --> 23:10.190]  I'm going to put 250 grams now of iron-aluminum thermite in here,
[23:11.650 --> 23:14.810]  and see if I can just melt through the top of the drive.
[23:14.810 --> 23:22.010]  So what I've done is I've cast the top of the drive out of a refractory ceramic material with a cavity to pack our thermite in.
[23:22.010 --> 23:28.130]  It can survive the heat, and hopefully we're just going to totally toast this drive.
[23:30.210 --> 23:36.530]  I've got to clamp down here to make sure we don't have any hard disks jumping around the place this time.
[23:36.530 --> 23:42.670]  So the first thing you notice here in this high speed is that containment is going to remain a challenge.
[23:42.670 --> 23:49.510]  It's not the neatest and cleanest thing that's happening here.
[23:49.510 --> 23:59.490]  In fact, this shot set a carpet on fire in my friend's house, and a large chunk of the corner of that is missing now.
[23:59.490 --> 24:00.750]  Sorry, Miles.
[24:01.570 --> 24:10.130]  But look at what's going on here. Even after that initial spray, we've got just blowtorch happening here inside this box.
[24:10.190 --> 24:12.170]  So it's looking pretty good.
[24:12.170 --> 24:14.630]  I'm feeling confident about this one.
[24:17.330 --> 24:20.690]  So, let's open it up and see how it looks.
[24:21.810 --> 24:25.250]  We've got our photographic lights set up there because we're pros.
[24:34.880 --> 24:37.480]  Yeah, looks like it just came out of the oven, right?
[24:38.340 --> 24:41.780]  It could be some kind of baked good.
[24:42.840 --> 24:45.940]  Here's a closer look and we can see again some interesting things here.
[24:45.940 --> 24:50.940]  We can see that we've actually melted a small hole in the top of the drive enclosure.
[24:51.000 --> 24:56.540]  And we can see big beads everywhere of that molten iron that we produced, or formerly molten iron.
[24:57.280 --> 25:05.800]  Once again, you open it up and what we see is that the electronics again is just melted into slag.
[25:05.800 --> 25:09.840]  But the disk itself is still got that shiny surface.
[25:10.220 --> 25:13.600]  Maybe we reached the temperature we needed, maybe not. It's hard to say.
[25:13.600 --> 25:15.440]  There's the molten slag.
[25:15.720 --> 25:17.780]  But here it is after we cleaned it up.
[25:17.900 --> 25:22.880]  And once again, we just don't know how much damage we caused to those platters.
[25:22.880 --> 25:26.080]  Maybe they got to the temperature we needed, maybe not.
[25:26.440 --> 25:29.020]  Would you trust your life to it? I wouldn't.
[25:29.020 --> 25:32.060]  So, I would say, unreliable.
[25:33.700 --> 25:36.180]  So, that's it for thermal.
[25:36.540 --> 25:42.400]  The thing is, and this is something that Bruce and Shane and Deviant found in DEF CON 19 as well,
[25:42.400 --> 25:46.180]  is that the bottom of that disk is a giant slug of aluminum.
[25:46.180 --> 25:47.620]  It's a massive heat sink.
[25:47.780 --> 25:53.640]  And so, you just have to be aware of how much heat you need to dump into a drive in order to burn it.
[25:53.640 --> 25:56.100]  So, sure, you can destroy a drive with thermite.
[25:56.100 --> 25:58.800]  But just be aware of how much that you need.
[25:59.440 --> 26:01.480]  And now it's time to move on to kinetic methods.
[26:01.480 --> 26:04.700]  So, our goal here with the kinetic is physical destruction.
[26:04.700 --> 26:10.680]  We want to deform, spindle, mutilate our drive, preferably separate it into pieces,
[26:10.680 --> 26:16.140]  and make it so it's going to be really hard for a mechanical scanning to read the surface of that drive.
[26:17.240 --> 26:21.820]  So, what that means is, if you're going up against the most powerful adversary,
[26:21.820 --> 26:24.160]  then you should also degauss the drive too.
[26:25.180 --> 26:27.160]  Redundancy. Be safe.
[26:27.820 --> 26:29.940]  So, here's some ideas I didn't explore here.
[26:29.940 --> 26:34.980]  I didn't look at... if they make disc crushers that operate vertically,
[26:34.980 --> 26:38.640]  because of our 1U constraint, you could make one that went horizontally.
[26:38.660 --> 26:40.840]  I knew I could do it, so it wasn't too interesting.
[26:41.020 --> 26:45.280]  And then also using various high-pressure cutting tools, like a water jet cutter or something like that.
[26:45.280 --> 26:48.920]  We totally could do that, but you need a lot of excess infrastructure.
[26:48.920 --> 26:51.040]  It's the same as the inductive methods.
[26:51.040 --> 26:54.680]  So, it wasn't worth exploring within the constraints.
[26:55.120 --> 26:58.120]  But my first idea was, what about puncturing?
[26:58.120 --> 27:02.300]  Because I have a nail gun at home that's designed to fire nails into concrete.
[27:02.820 --> 27:07.720]  So, if you could fire a nail into concrete, you could fire it through a drive.
[27:07.720 --> 27:09.840]  Here's a video of that nail gun.
[27:09.880 --> 27:13.740]  It basically uses a .22 caliber cartridge, so it's like a .22 caliber bullet.
[27:14.020 --> 27:17.760]  And you fire it into some concrete. This is at 480 frames per second.
[27:18.100 --> 27:20.400]  And still, it's so fast, you can't see the nail.
[27:20.400 --> 27:23.560]  And you can see, mixed against me, that that's cinderblock.
[27:24.300 --> 27:29.140]  So, if we can punch a cinderblock, I feel like we can probably punch through a hard disk.
[27:30.040 --> 27:36.720]  So, here we are. What I've done here is I've milled the end off the disk, so that it's still spinning, you can still see it.
[27:36.720 --> 27:40.300]  But I have to do it upside down, because you actually have to hit this thing with a hammer.
[27:40.480 --> 27:44.980]  And you can see where I already tried it on the top, and I bent the top, so we had to do it from the base.
[27:45.180 --> 27:48.920]  But here we are at 480. Bam. No problem at all.
[27:48.920 --> 27:56.540]  Goes straight through those drives, nails the bladders, cracks the molding at the base. No problem at all.
[27:56.980 --> 28:02.220]  So, I feel like this is good. And at the same time that I did this, even though I had one of these at home,
[28:02.220 --> 28:07.780]  I shot out in LA with Miles Ledlett, and so I had to borrow a nail gun from somewhere, because I couldn't take it with me on the plane.
[28:07.780 --> 28:13.080]  And the guy I borrowed the nail gun from also had a pneumatic nailer. And he said, hey, you want to try this as well?
[28:13.080 --> 28:16.720]  I was like, of course. We're doing science. We have to try everything.
[28:16.720 --> 28:22.240]  So here's the pneumatic nailer. And I didn't have high hopes for this, because whatever, it's just a pneumatic nail gun.
[28:22.240 --> 28:24.360]  It's designed for nailing wood, not concrete.
[28:25.000 --> 28:31.380]  But, as you can see, boom. Goes straight through.
[28:31.700 --> 28:39.820]  So, here's what it looks like afterwards. You can see those bladders have squished together, they've warped.
[28:39.820 --> 28:47.140]  If we had a whole bunch, like we could make some kind of a pancake cylinder that fired a whole bunch of nails right around the drive, no problem at all.
[28:47.140 --> 28:48.900]  Especially if you're really gassing as well.
[28:48.960 --> 28:52.140]  So, I say this method eminently feasible.
[28:53.580 --> 28:57.420]  But what I'm really interested here in the kinetic method is high explosives.
[28:57.860 --> 29:00.940]  Because this is some work that I've wanted to do for a long time.
[29:01.780 --> 29:04.480]  In general, not just painting the hard disks.
[29:04.900 --> 29:08.200]  So, for a start, there's no doubt, right?
[29:08.200 --> 29:12.740]  We know that we can destroy a drive with high explosives. That's not in question.
[29:12.740 --> 29:17.920]  What we're interested in here, also, we get thermal factors for free with high explosives.
[29:17.920 --> 29:20.360]  Because they get hot too. So we can do explosive welding.
[29:20.620 --> 29:23.780]  So, it's a Greek method. It's very violent, very destructive.
[29:23.780 --> 29:25.620]  But we know it can work.
[29:25.780 --> 29:29.720]  What we're interested here, number one, is can we confine that explosion?
[29:29.720 --> 29:32.060]  Can we do something that keeps that in the rack quickly?
[29:32.560 --> 29:36.720]  And then also, this is the bit that I really wanted to do for years and years.
[29:36.720 --> 29:38.680]  Was experiment with these new techniques.
[29:38.960 --> 29:43.740]  In particular, I wanted to 3D print high explosives penetrators.
[29:44.940 --> 29:47.040]  Which is work that hasn't been done before.
[29:47.580 --> 29:49.920]  So, let me speak a little bit about that.
[29:50.740 --> 29:55.320]  When you have an explosive, it directs its energy all over the place, in every direction.
[29:55.320 --> 29:59.000]  What we care about is directing that energy to one place.
[29:59.440 --> 30:01.300]  So here's a little illustration of that.
[30:01.300 --> 30:07.820]  As an aside, I have to say, there's an interesting cultural notion.
[30:07.820 --> 30:10.440]  So China invented fireworks.
[30:11.120 --> 30:15.980]  But Americans turned it into a hobby that people do in their homes.
[30:16.220 --> 30:18.180]  America is a very weird place.
[30:18.180 --> 30:22.540]  So this is at the annual convention of the American amateur pyrotechnics.
[30:22.540 --> 30:28.500]  And what these guys are trying to do here is knock down the rack that this explosive is suspended on.
[30:28.500 --> 30:30.920]  So this is just happening at a county fairground.
[30:33.780 --> 30:37.860]  You can see how happy everyone is, right? Because they've destroyed this rack.
[30:40.740 --> 30:46.840]  In order to destroy that cross piece, they had to have a huge explosion at that distance.
[30:46.840 --> 30:50.200]  Because all that energy is going in every direction. It's not concentrated.
[30:50.200 --> 30:52.920]  But we can't afford to do that in Iraq.
[30:52.920 --> 30:55.340]  So what we want to do is direct that explosion.
[30:55.340 --> 30:58.260]  And what we're going to make use of is a thing called the Monroe effect.
[30:58.260 --> 31:02.620]  Or what is better known in general circles as a shape charge.
[31:03.080 --> 31:07.520]  So what that is, is a block of high explosives that's got a shape cut in it.
[31:07.560 --> 31:09.580]  That shape is usually a cone.
[31:09.580 --> 31:14.780]  But it can also be a linear, like if you stretched a cone into a line.
[31:14.780 --> 31:16.340]  So a triangle groove.
[31:16.480 --> 31:21.420]  And what happens here is you place that cavity up against the material that you want to damage.
[31:21.540 --> 31:23.500]  And you set your high explosive off.
[31:24.000 --> 31:29.480]  The cavity, sort of counter-intuitively, has the effect of concentrating that explosive.
[31:29.720 --> 31:33.400]  And it concentrates the shockwave into a kind of a jet.
[31:33.500 --> 31:36.240]  And it'll cut through that material.
[31:37.520 --> 31:41.140]  And so where that cavity was, you get much more damage than everywhere else.
[31:41.140 --> 31:46.640]  And so you form jets. You can also, if you line the explosive, you can form what's called an explosive bomb penetrator.
[31:47.380 --> 31:50.080]  So, for example, here's that you buy one of these things.
[31:50.080 --> 31:52.260]  Which you can do if you have the licenses.
[31:52.260 --> 31:54.660]  You'll see you've got your explosive cone.
[31:54.660 --> 31:55.800]  You've got a liner.
[31:55.920 --> 31:58.120]  Some standoff distance.
[31:58.140 --> 32:00.300]  And then the penetrating jet will cut through.
[32:00.580 --> 32:04.360]  So having a metal liner greatly increases that penetration.
[32:05.060 --> 32:09.100]  The jet is actually composed partially of high temperature metal.
[32:09.260 --> 32:13.860]  And so what you want is a metal that is very dense and very ductile.
[32:13.860 --> 32:15.220]  So copper or tantalum.
[32:15.220 --> 32:18.000]  It's one place you'll see tantalum outside of a capacitor.
[32:19.680 --> 32:21.920]  So here's an example of some commercial penetrators.
[32:21.920 --> 32:24.280]  These are something that's used in the oil and gas industry.
[32:24.280 --> 32:29.820]  So when you drill your oil well, you don't want the oil to come up while you're still drilling it.
[32:29.820 --> 32:31.360]  You want to seal everything up.
[32:31.360 --> 32:34.240]  And then when you're ready to get the oil, you send these things down the hole.
[32:34.320 --> 32:36.120]  You use them to punch holes in the metal.
[32:36.460 --> 32:39.220]  And out comes the oil and you slip it all up.
[32:39.480 --> 32:41.080]  So a few things to note here.
[32:41.080 --> 32:48.400]  You can see at the top there's a little foil coating that exposes the high explosive to whatever you're going to set it off with.
[32:48.400 --> 32:50.540]  A blasting cap or some detonation cord.
[32:50.540 --> 32:58.600]  And then also sometimes you have a built-in little cup that gives you the standoff distance for optimum formation of that jet.
[33:00.400 --> 33:04.560]  So when we did this work, it was out in Colorado with a local bomb squad.
[33:04.560 --> 33:05.760]  We needed a place to do it.
[33:05.760 --> 33:08.160]  They had an explosive range and they said okay.
[33:08.160 --> 33:09.960]  Because they like research too.
[33:10.180 --> 33:13.600]  And they also said, hey, we've got some stuff we need to get rid of.
[33:13.600 --> 33:16.120]  Can you guys load up for us when you do this research?
[33:16.120 --> 33:18.040]  We said, of course we can.
[33:18.620 --> 33:21.120]  So they gave us some of these oil well perforators.
[33:21.300 --> 33:24.680]  And so at the end of the day, we had a couple left over.
[33:24.680 --> 33:27.460]  And so this is just to show you guys what happens here.
[33:28.020 --> 33:34.860]  We can put them in the ground in a hole with a jet pointing upwards so that we didn't have a lot of things spraying all over the place.
[33:36.240 --> 33:38.280]  And here we are setting it off.
[33:42.860 --> 33:48.940]  And here's a still from that video where you can see those two jets forming and going straight up.
[33:48.940 --> 33:50.420]  This is an amazing photograph.
[33:50.700 --> 33:54.500]  Because not only do we have this great still of those jets.
[33:54.500 --> 33:57.520]  I mean, you can see these things are this big right there in the palm of my hand.
[33:57.520 --> 33:59.120]  And this massive jet.
[33:59.300 --> 34:04.160]  We can also see that's the spray from the blasting cap that we set the net cord off with.
[34:04.160 --> 34:14.360]  And then this has all happened so fast that that cord, that detonating cord, which is high explosives inside a plastic tube.
[34:14.480 --> 34:18.260]  The explosives has fired because we fired with our perforators.
[34:18.260 --> 34:22.340]  But the plastic hasn't shattered yet and gone away.
[34:22.340 --> 34:24.420]  So that's how fast this all happens.
[34:25.440 --> 34:28.100]  So here, just proof of concept, right?
[34:28.100 --> 34:33.040]  POC or GTFO, we're going to strap an oil well perforator to a hard disk and see what happens.
[34:34.700 --> 34:35.820]  Beep!
[34:40.720 --> 34:45.400]  Bang! Things fly around a little bit, but we don't care about that yet.
[34:45.820 --> 34:48.500]  So here's some slo-mo footage.
[34:49.900 --> 34:54.120]  You can see a chunk of the disk fly off there to camera left.
[34:57.260 --> 35:04.900]  And after recovery we can see we've sliced right through the bottom molding of that disk.
[35:04.900 --> 35:06.060]  And here are the platters.
[35:06.060 --> 35:12.580]  So that jet has just gone right through those aluminum platters like they were a piece of cheese or something.
[35:13.460 --> 35:17.940]  So that looks pretty good. Here's all the bits that we recovered from that disk.
[35:18.700 --> 35:24.800]  So you can see we didn't find one half of the bottom, but the platters are what we care about.
[35:25.040 --> 35:29.460]  But hey, what's this over to the side here?
[35:29.460 --> 35:31.780]  That's interesting. We didn't notice that.
[35:31.780 --> 35:39.700]  That's a hole that those penetrators, after going through, well that one penetrator, after going through the disk, it punched that hole in the metal plate.
[35:39.760 --> 35:42.080]  That's the other side of that hole.
[35:42.580 --> 35:45.360]  This is the ground underneath it.
[35:45.360 --> 35:50.960]  And that piece of wire is the wire that we stuck in that hole to see how deep it went.
[35:51.260 --> 35:52.640]  15 inches.
[35:53.260 --> 35:59.420]  So that's 37.5 centimeters roughly in metric. That's a deep hole.
[35:59.420 --> 36:03.740]  Alright, we're going to be using these sheet charges. We're going to have a containment problem.
[36:03.740 --> 36:07.740]  Because that's going to get through one U of concrete. No problem at all.
[36:08.520 --> 36:16.140]  But let's take a look at the stuff that I think was really interesting here, which is the design of our Monroe Effect using 3D printing.
[36:17.240 --> 36:20.800]  We have a few parameters we can adjust for our sheet charge.
[36:20.800 --> 36:27.540]  Those are the apex angle of our cone, the standoff distance, and then the overall height of the charge.
[36:27.540 --> 36:35.960]  So here's some stuff from an explosives engineering research paper from the 60s that showed how one of those parameters affects things.
[36:35.960 --> 36:40.600]  That's the apex angle versus the detonation velocity, or the velocity of the jet.
[36:40.600 --> 36:43.160]  And we can see a pretty clear inverse relationship.
[36:43.160 --> 36:47.480]  So the steeper our angle is, the faster of a jet we're going to get.
[36:48.080 --> 36:56.540]  So we take those parameters, we can generate a parametric 3D model for our digital high explosive fabrication with 3D printing.
[36:56.540 --> 37:04.880]  So, for example, in something like OpenASCAD, it allows us to write code that turns into 3D models and we can have parametric functions.
[37:06.600 --> 37:11.520]  Now, 3D printing, any new material, is a materials handling problem, right?
[37:11.520 --> 37:18.060]  Basically, you have to do a lot of materials science to figure out how you're going to effectively deposit that substance.
[37:18.240 --> 37:21.960]  So things like, how are you going to extrude it? If you're going to melt it, what temperature?
[37:22.120 --> 37:25.020]  How are you going to deal with supports if you've got overhangs?
[37:25.020 --> 37:31.880]  What about internal voids? If you need homogeneity, which in this case we do, how are we going to make sure that we get that?
[37:31.900 --> 37:37.540]  These are things that if you had a 3D printing company, you could easily spend a couple of years getting right, or longer.
[37:37.560 --> 37:42.180]  I don't want to do this with this research project, so I need some way to get around it.
[37:42.180 --> 37:46.620]  So the hacker in me is thinking, what am I going to do about this?
[37:46.620 --> 37:49.440]  So I don't have to solve that problem, that's not the problem I'm interested in.
[37:49.440 --> 37:59.640]  So what I decided was, what about printing on a traditional printer, very thin-walled plastic enclosures, and then putting a self-compacting explosive in.
[37:59.640 --> 38:04.680]  So that explosive is going to be the shape that I wanted. It's going to be void-free, because it's self-compacting.
[38:04.680 --> 38:06.760]  In this case, I'm going to use a liquid explosive.
[38:07.380 --> 38:08.500]  It just might work.
[38:09.780 --> 38:19.480]  So again, I want to sort of toot my own horn here, and say this is the first open literature example of 3D printing of high-explosive geometries.
[38:19.480 --> 38:21.660]  And that's why I was really interested in doing this.
[38:22.760 --> 38:25.400]  So, what to use for an explosive?
[38:25.580 --> 38:30.000]  So I did some research, and I found there are some liquid explosives out there on the market.
[38:30.860 --> 38:37.400]  But in particular, the one I'm interested in was expensive, and I didn't want to pay for it.
[38:37.400 --> 38:41.580]  So, I'd rather make it myself. Another sort of hacker mindset thing.
[38:41.700 --> 38:47.000]  So, I developed this thing we call Fuel Expedient Liquid Explosive, or FELIX.
[38:47.240 --> 38:50.780]  It's similar to these other ones you can get in the United States.
[38:50.780 --> 38:54.960]  Like I said before, you know how I said the United States is a very weird place?
[38:55.500 --> 39:02.660]  In the United States, everyone has a fundamental right to shoot at things that explode.
[39:04.140 --> 39:11.340]  Part of the things that Americans take for granted is that if they're going to shoot at it, it can explode.
[39:11.340 --> 39:14.520]  You can't use this stuff for any other use, but you can use it for shooting at it.
[39:14.520 --> 39:17.440]  And so, there are these things called Panerai Kind Pack.
[39:17.440 --> 39:20.660]  They're these ones that you can buy. They're two-part explosives.
[39:20.920 --> 39:24.820]  Each part individually is okay, and when you mix them, you're only allowed to shoot at them.
[39:24.820 --> 39:28.040]  But they're solids, so I didn't want to just buy those. They're cheap, actually.
[39:29.000 --> 39:34.600]  So instead, I found this other commercial product, and then I reverse-engineered it and figured out how to make it myself.
[39:35.860 --> 39:39.720]  Instead of ammonium nitrate, it's basic high-explosive substrate is nitromethane.
[39:39.720 --> 39:43.200]  So you might have heard of this at this high test.
[39:43.200 --> 39:48.900]  Racing fuel, or also certain kinds of model aircraft, run on nitromethane.
[39:49.240 --> 39:52.140]  What this means is, you can just buy this stuff from Amazon.
[39:52.880 --> 39:59.240]  And then it's sensitized with an aluminum powder that's a particular size and stearic acid coated.
[39:59.700 --> 40:03.180]  And that's very, very important, getting that stearic acid ratio right.
[40:03.240 --> 40:07.120]  One of the good things here is that you can just ship this as hazardous materials.
[40:07.120 --> 40:09.500]  It's not explosive until it's mixed.
[40:10.480 --> 40:13.720]  Here's the chemical reaction with the stoichiometry.
[40:14.380 --> 40:18.880]  The nitromethane is actually high-explosive by itself, but it's very, very intensive.
[40:18.880 --> 40:20.460]  You'll never get it to go by itself.
[40:20.460 --> 40:25.200]  When it does decompose, it decomposes into a variety of gases and water.
[40:25.200 --> 40:26.980]  That temperature is also a gas.
[40:27.200 --> 40:32.040]  The good thing about this is that water goes on to re-infect with the sensitizers.
[40:32.040 --> 40:35.500]  So it reacts with the aluminum, produces more hydrogen, more energy.
[40:36.060 --> 40:37.040]  Everything's great.
[40:37.080 --> 40:40.360]  Turns out the stoichiometric ratio is not what you want for mixing this.
[40:40.360 --> 40:44.300]  It'll work, but it'll be way more expensive because we use more aluminum than you need.
[40:44.300 --> 40:45.740]  And you'll see that coming up.
[40:47.020 --> 40:49.120]  So, let's do this.
[40:49.120 --> 40:58.680]  My first idea was to take that linear shape chart, that little triangle groove, wrap it around into a circle and make an annulus that matches the hard disk.
[40:58.680 --> 41:00.960]  So there's my OpenSCAD model.
[41:00.960 --> 41:03.380]  There's my 3D-printed container.
[41:03.540 --> 41:06.900]  You can see the other side, triangle groove wrapped around.
[41:07.460 --> 41:12.580]  And what we find is that we can fit about 60 grams of Deluxe into that slot.
[41:12.580 --> 41:13.980]  And it's kind of a paste.
[41:13.980 --> 41:20.200]  You stick it in there, shake it around a bit, and it gives you a nice, void-free geometry.
[41:20.420 --> 41:27.300]  There it is, strapped with a plastic cup to do the standoff distance, and ready to insert a blasting cap and test it out.
[41:27.300 --> 41:30.020]  So here's our first shot with the annular charge.
[41:36.180 --> 41:37.540]  Nice big bang.
[41:37.540 --> 41:41.400]  The hard disk stays pretty much where we left it, which is good.
[41:41.400 --> 41:47.680]  But you'll see on the high-speed shot here, we're still going to have to think carefully about our containment.
[41:51.100 --> 41:52.140]  Here we go.
[41:53.400 --> 41:56.500]  Here's another shot with the annular charge.
[42:02.440 --> 42:04.240]  And again at high speed.
[42:13.990 --> 42:16.090]  And there's one of the results of those drives.
[42:16.090 --> 42:19.250]  So we can see a few interesting things from this result.
[42:19.250 --> 42:24.190]  Number one, as I mentioned before, the stoichiometry... the stoichiometric ratio is not what you want.
[42:24.190 --> 42:26.650]  We can see a lot of unconsumed aluminum here, right?
[42:26.650 --> 42:30.210]  We're just... we're wasting money by using that much aluminum.
[42:30.810 --> 42:39.190]  We can see that we've stripped those platters off the spindle, and we've actually compressed and welded them together.
[42:39.590 --> 42:47.790]  And then we can see, though, that what we tried to achieve here, what we really wanted was that penetrating jet in a ring shape that was going to cut through all those platters.
[42:47.790 --> 42:49.170]  We haven't done that.
[42:49.350 --> 42:51.570]  We've only cut through in one place.
[42:51.750 --> 43:00.210]  And if we look at how we have our setup going on here, we can see very clearly that that one place we cut through, that's where the blasting cap was located.
[43:00.310 --> 43:08.390]  So we've done what we wanted to in a small area, but the cutting jet has not propagated around the ring.
[43:09.730 --> 43:11.470]  So let's try a different geometry.
[43:11.470 --> 43:12.430]  This is the great thing here.
[43:12.430 --> 43:14.230]  We can just 3D print whatever we want.
[43:14.230 --> 43:20.550]  So let's do a radial shape charge, where those cutting grooves radiate around from the center.
[43:20.670 --> 43:22.930]  There's our OpenSCAD model.
[43:22.930 --> 43:30.870]  And what we're going to do here is we're going to run a loop of DepCord around the top so that we can initiate everything at the same time from the top.
[43:30.950 --> 43:36.350]  And so there's a little top case there with a little hole to feed the DepCord through.
[43:37.850 --> 43:39.990]  Here's our 3D printed model.
[43:39.990 --> 43:43.190]  We can fit more Felix in it because there's more empty space.
[43:43.190 --> 43:45.030]  So we can get 100 grams in there.
[43:45.030 --> 43:48.090]  We're going to put some DepCord there around the top.
[43:48.090 --> 43:50.470]  And there it is, all packaged up, ready to go.
[43:51.790 --> 43:54.150]  So here's that shot.
[44:01.610 --> 44:03.930]  Things moved a little further this time.
[44:04.290 --> 44:08.370]  Here we are with a 960 high-speed shot.
[44:08.370 --> 44:10.510]  Big explosion.
[44:10.930 --> 44:12.550]  Going to have to work on that.
[44:15.300 --> 44:18.900]  Here we are with a GoPro long shot, 120.
[44:19.920 --> 44:23.860]  The bits of that disc go a long way.
[44:27.820 --> 44:34.960]  So when we've found bits of that, what we can see is all the components were stripped off the control board.
[44:35.460 --> 44:38.100]  And there's the pieces of the platters.
[44:38.100 --> 44:40.700]  They're all welded together, plus they're shredded.
[44:40.700 --> 44:42.520]  We did a good job here.
[44:43.480 --> 44:47.660]  We can see there, just complete explosive welding of the platters.
[44:48.820 --> 44:50.860]  So we're getting somewhere here.
[44:50.980 --> 44:54.100]  We're definitely destroying that disc, but we're not...
[44:54.100 --> 44:59.400]  3D printing is doing a good job, but we're not taking care yet of our other goal.
[45:00.000 --> 45:03.200]  Suppressing the blast and keeping everything within one unit.
[45:03.780 --> 45:08.120]  So let's think a bit about what we need to do here to suppress that blast.
[45:08.120 --> 45:12.740]  We need to direct our energy into the drive, not everywhere else.
[45:13.140 --> 45:16.400]  To want to decouple that from our surrounding equipment.
[45:16.980 --> 45:20.400]  So we have our explosives against the disc.
[45:20.920 --> 45:26.060]  And we need some kind of damping material in between the explosives and the equipment shell.
[45:26.580 --> 45:29.380]  And so our damping material, what's that going to be?
[45:29.380 --> 45:30.540]  Let's think about it.
[45:30.540 --> 45:36.580]  We want to have some kind of matrix that compresses and absorbs energy.
[45:36.580 --> 45:40.240]  And then has alternating incompressible parts to keep the matrix stable.
[45:40.940 --> 45:45.860]  Just the same as firing a bullet through a lot of layers of fabric.
[45:45.860 --> 45:48.740]  We want to absorb that energy as we go along.
[45:49.440 --> 45:52.000]  So we need some kind of foam, for example.
[45:52.000 --> 45:54.020]  Maybe a liquid and gas foam.
[45:54.440 --> 45:56.100]  And it's got to be inexpensive.
[45:56.200 --> 45:59.260]  Because once again, we're trying to do this at scale.
[45:59.260 --> 46:01.940]  We can't afford really exotic materials.
[46:01.940 --> 46:03.820]  What might we be able to use?
[46:03.920 --> 46:06.900]  What's an inexpensive foam that you can get?
[46:07.480 --> 46:10.440]  And we also want to be able to inject that when we need to.
[46:10.440 --> 46:13.740]  Because we don't want to have our piece of equipment full of foam all the time.
[46:13.740 --> 46:16.280]  Because we have to replace hard disks and stuff all the time.
[46:16.280 --> 46:19.820]  So we don't want to have goo constantly on our device.
[46:20.280 --> 46:26.420]  So what can we buy that's cheap, foamy, comes out when you press the button?
[46:27.700 --> 46:28.740]  Shaving cream.
[46:28.740 --> 46:33.140]  And this is something, you know, again, I was talking to a lot of experts when I did this research.
[46:33.140 --> 46:35.660]  And an explosive engineering instructor in Colorado said,
[46:35.660 --> 46:37.140]  Hey, you might want to check this out.
[46:37.140 --> 46:38.700]  We do demos for this stuff.
[46:39.320 --> 46:40.860]  So let's give it a try.
[46:40.960 --> 46:42.180]  So here's a big shot.
[46:42.180 --> 46:44.980]  This is 41 inches of 100 gram green decor.
[46:44.980 --> 46:46.360]  We don't care about the geometry right now.
[46:46.360 --> 46:47.600]  We just care about the blocks.
[46:47.660 --> 46:50.080]  This is twice as big as the last blocks.
[46:50.320 --> 46:51.680]  Plus our shaving cream.
[46:51.680 --> 46:52.920]  We put it in a box.
[46:53.580 --> 46:54.520]  Fill it up.
[46:54.900 --> 46:56.640]  And let's see how it looks.
[47:05.000 --> 47:07.960]  You know, that box flies around, sure.
[47:08.020 --> 47:16.440]  But we can see immediately that that glass is significantly smaller in terms of its envelope than the ones we did before.
[47:16.440 --> 47:19.480]  So let's take a look at our video and take single frames.
[47:19.480 --> 47:23.340]  This is the first frame of the explosion for each of those videos.
[47:23.820 --> 47:25.640]  We did two experiments here with the shaving cream.
[47:25.640 --> 47:27.200]  This is with shaving cream.
[47:28.280 --> 47:29.560]  That's without.
[47:29.560 --> 47:32.140]  On one of those previous hard disk shots.
[47:32.140 --> 47:32.940]  With.
[47:32.980 --> 47:34.740]  From a second camera.
[47:34.900 --> 47:35.960]  Without.
[47:36.240 --> 47:38.900]  You can really see the difference there.
[47:38.900 --> 47:50.180]  And, you've got to keep in mind, the explosion on the left, this one, is twice as big in terms of explosive material as the one on the right.
[47:50.300 --> 47:53.800]  So, that's pretty serious suppression.
[47:53.920 --> 47:55.580]  So let's investigate that.
[47:55.580 --> 47:58.520]  So what we did, we have a 75 gram helix shot.
[47:58.520 --> 48:03.700]  We built a little 1U rack simulator here out of a steel plate with some angle steel.
[48:03.760 --> 48:05.500]  There we are all set up.
[48:06.040 --> 48:08.380]  Squeezing in the shaving cream.
[48:08.800 --> 48:13.200]  Put our sandbag on top to simulate our 1U of concrete on top.
[48:13.840 --> 48:14.960]  And here we go.
[48:21.340 --> 48:23.800]  Not bad. Not bad at all.
[48:23.800 --> 48:26.460]  Here we are with a slow-mo shot at 960.
[48:29.220 --> 48:31.760]  And, you know, that sandbag certainly moves, right?
[48:31.760 --> 48:33.620]  Because it's just sitting there. Nothing's holding it down.
[48:33.620 --> 48:36.660]  That's only sand. We dug it up from the dirt right next door.
[48:36.720 --> 48:42.220]  So if that was a slab of concrete that was bolted down, we could definitely suppress that blast.
[48:46.620 --> 48:48.260]  Take a look at the steel plate.
[48:48.480 --> 48:51.620]  There's like a slight dent in it, right?
[48:51.620 --> 48:55.420]  Compared to the shattering that we've done to our hard disk.
[48:56.880 --> 48:58.540]  There's our bottom plate.
[48:58.540 --> 49:02.120]  We can see that we've definitely expanded out that angle line.
[49:02.120 --> 49:05.120]  So we'd have to care about the sides if this was in a rack.
[49:05.480 --> 49:10.540]  But the plate itself has got a little dent, a little impression of the hard disk on it.
[49:10.540 --> 49:12.460]  But it's otherwise pretty much unscathed.
[49:13.400 --> 49:17.160]  So, summary of our kinetic approach with high explosives.
[49:18.000 --> 49:21.320]  With enough engineering effort, it just might work.
[49:23.060 --> 49:26.200]  So moving on now to electric attacks.
[49:26.440 --> 49:29.840]  We want to use the fact that we have a lot of electricity in the data center.
[49:29.840 --> 49:33.480]  We've got the power. Let's use it against our meteor instead of for it.
[49:33.500 --> 49:36.700]  In particular, we've been doing spinning disks up until now.
[49:36.700 --> 49:38.840]  Now I want to take a look at SSDs.
[49:39.660 --> 49:42.400]  So again, what I didn't look at?
[49:42.780 --> 49:47.260]  Mass degaussing of drives, because degaussing, we know, is a thing that we do.
[49:48.880 --> 49:52.280]  Exotic electromagnetic pulse or microwave or RF attacks.
[49:52.280 --> 49:53.900]  Not time for it this time.
[49:54.700 --> 49:57.840]  But first of all, let's look at the exploding bridge wire effect.
[49:57.840 --> 50:02.660]  So my idea first was like if we just dump a ton of high voltage into a flash chip,
[50:02.660 --> 50:03.900]  what's going to happen to it?
[50:03.900 --> 50:12.920]  In particular, I've done some experiments where if you pass enough current at enough of a rise time,
[50:12.920 --> 50:14.180]  that wire will actually explode.
[50:14.180 --> 50:16.260]  That's used in commercial detonators.
[50:16.800 --> 50:20.900]  So here's my friend Miles's exploding bridge wire rig.
[50:20.900 --> 50:22.460]  We've used that many times.
[50:22.960 --> 50:25.680]  We've worked together on a lot of these projects.
[50:25.960 --> 50:27.800]  It looks pretty messy, but it works.
[50:28.080 --> 50:32.680]  And here's what I'm going to use because at the time I did this, SSDs were very expensive.
[50:32.680 --> 50:33.840]  They're still pretty expensive.
[50:33.840 --> 50:35.840]  I didn't want to dump hundreds and hundreds of dollars.
[50:35.840 --> 50:39.140]  No one would give me any decommissioned ones because they're all still in service.
[50:39.280 --> 50:44.140]  So thanks to the man who works who gave me a lot of free flash drives, I exploded them.
[50:44.140 --> 50:47.100]  So here's just what the exploding bridge wire looks like.
[50:50.720 --> 50:52.500]  It happens very fast.
[50:52.780 --> 50:56.180]  So here we are with a high-speed shot at 960.
[50:56.480 --> 51:00.640]  And even at 960, it basically happens instantaneously.
[51:00.740 --> 51:01.880]  That wire is gone.
[51:01.880 --> 51:04.880]  You can see a lot of energy came out of that little wire.
[51:05.960 --> 51:09.620]  So first of all, I thought, well, let's just be fully kinetic here, right?
[51:09.620 --> 51:17.960]  Let's just wrap this around the SSD and see if we can just convert electricity to force, smash that drive.
[51:21.680 --> 51:23.840]  It made it move at least.
[51:23.940 --> 51:25.320]  Let's take a closer look.
[51:28.740 --> 51:33.480]  Well, the wire vanished, but that drive has kind of bounced off camera.
[51:33.480 --> 51:35.600]  It doesn't look like it suffered a lot of damage.
[51:35.740 --> 51:38.640]  And sure enough, when we take a look, it's scorched.
[51:38.640 --> 51:42.660]  We decapped the chip on the bottom, which is the microcontroller.
[51:43.340 --> 51:49.460]  But certainly, I do not trust that that flash memory is inaccessible now, right?
[51:49.460 --> 51:52.360]  You could just remove that from the board and solder it somewhere else.
[51:52.360 --> 51:54.140]  So this method is not reliable.
[51:55.260 --> 52:03.280]  But really what I thought would work here is to put a huge high-voltage power spike inside the chip itself.
[52:03.280 --> 52:07.420]  And the best way to do that is to raise the ground pin to a huge voltage
[52:07.420 --> 52:12.740]  because no one designs electronics with protection on the ground side against this kind of thing.
[52:12.740 --> 52:15.820]  Now, if there's power protection, it's always on the power side.
[52:16.160 --> 52:21.340]  So wire it up into the ground here, and let's dump 15,000 volts into this chip.
[52:22.860 --> 52:23.900]  3... 2...
[52:28.040 --> 52:29.580]  Nice and sharp.
[52:32.660 --> 52:36.060]  We see more pieces there. That's a good sign.
[52:36.620 --> 52:37.680]  And here we go.
[52:37.680 --> 52:45.020]  Taking a look, what we've done is we've actually coupled that exploding wire to all of the bond wires inside the chip.
[52:45.080 --> 52:47.540]  We've cracked and decapped the chip.
[52:47.920 --> 52:50.420]  You can see what's left of the wires all hanging out.
[52:50.420 --> 52:52.660]  The traces have blown off the circuit board.
[52:52.960 --> 52:53.740]  Nice.
[52:54.540 --> 52:56.420]  There's the cap of the flash memory chip.
[52:56.660 --> 52:58.980]  So, another look at it.
[52:58.980 --> 53:02.320]  We've also decapped the microcontroller on the other side.
[53:02.740 --> 53:05.720]  So, this looks like a partially feasible attack.
[53:07.100 --> 53:09.900]  Now, this is something I've got to confess.
[53:10.340 --> 53:14.720]  This is something that I shot much earlier on a show that I was on with Miles.
[53:14.720 --> 53:19.620]  This is the same exploding wire rig, but we're doing it here for a CAN crusher.
[53:19.620 --> 53:26.000]  This is something I just wanted to show you guys, because although we can clearly attack SSDs with high voltage,
[53:26.000 --> 53:29.960]  what if we could also attack aluminum flat drives with it?
[53:29.960 --> 53:34.000]  And, sure enough, you can crush aluminum inductively.
[53:34.000 --> 53:38.760]  So, this is dumping a bunch of high voltage, high current through a coil,
[53:38.760 --> 53:40.980]  separated physically through a CAN,
[53:40.980 --> 53:44.640]  and we're going to crush that CAN without contacting it.
[53:44.640 --> 53:46.220]  And this happens very fast.
[53:46.220 --> 53:48.180]  So, this is at 2,000 FPS,
[53:48.180 --> 53:57.440]  and you can see that inductive current crushes that CAN and rips it in half in a fraction of a second.
[53:57.680 --> 54:01.000]  Here we have another shot at 2,000, different CAN,
[54:01.540 --> 54:06.480]  and that rips the coil apart, but it also cuts the CAN in half.
[54:07.860 --> 54:09.700]  Here we are with some super high speed shots.
[54:09.700 --> 54:14.400]  This is 100,000 FPS, and so you can see this is happening...
[54:14.400 --> 54:17.820]  I mean, even a fraction of a second doesn't cover it here.
[54:19.000 --> 54:20.800]  Check out this one on the right.
[54:22.320 --> 54:25.000]  A little bit blown out from the flash there,
[54:25.520 --> 54:29.320]  but everything that you're seeing in this video right now
[54:31.480 --> 54:38.800]  has happened in just less than a tenth of a second.
[54:40.340 --> 54:44.400]  So, we could do this to an aluminum case drive, I'm confident,
[54:44.400 --> 54:46.260]  but we don't know how much power it would take.
[54:46.260 --> 54:50.700]  The rig that we have is not powerful enough, so I didn't try that.
[54:50.800 --> 54:53.420]  But I wanted you guys to see that because I think it's pretty cool.
[54:54.460 --> 54:59.440]  So here's a summary of the research and what we learned.
[54:59.440 --> 55:01.520]  The most feasible attacks in each category.
[55:01.520 --> 55:06.600]  In thermal, the plasma cutter turns out sometimes simple is best.
[55:06.900 --> 55:11.340]  The oxygen injection also definitely would work with a little engineering,
[55:11.340 --> 55:15.540]  but you may require a sort of a complex injector to get that to happen.
[55:16.300 --> 55:21.180]  In the kinetic side, the nail guns definitely work,
[55:21.180 --> 55:24.740]  as long as you are not super paranoid.
[55:24.740 --> 55:27.240]  If you're going against the ultimate adversary,
[55:27.240 --> 55:30.800]  then the nail gun alone will not work, that will explode that drive.
[55:31.220 --> 55:34.780]  And the damned high explosive turns out to be super feasible.
[55:35.280 --> 55:37.860]  But you need a horizontal barrier as well.
[55:37.860 --> 55:41.640]  That explosive force is going to go out the side of your rack as well as up and down.
[55:42.440 --> 55:46.800]  And on the electric side, the high voltage power spike seems good against SSDs.
[55:46.840 --> 55:49.520]  The one thing is, we don't have a good idea yet
[55:49.520 --> 55:52.060]  about the forensic capabilities on SSDs.
[55:52.060 --> 55:55.480]  SSDs are weird. When you overwrite data on an SSD,
[55:55.480 --> 56:00.540]  it doesn't necessarily actually overwrite the space that data lived on.
[56:00.580 --> 56:03.600]  So there's still a lot to be learned about forensics on SSDs.
[56:03.600 --> 56:07.860]  There's a bunch of research out there right now already about erasing SSDs
[56:07.860 --> 56:11.220]  and then hooking them up and recovering data from the flash memory.
[56:11.220 --> 56:14.280]  That assumes that the memory chips haven't been damaged.
[56:14.340 --> 56:17.260]  In terms of what can be done to a damaged flash chip
[56:17.260 --> 56:19.900]  that can't still be hooked up to power and read,
[56:19.900 --> 56:21.500]  we don't know the answer to that.
[56:21.500 --> 56:24.960]  So again, if your life depends on any of these methods,
[56:24.960 --> 56:27.660]  then you should be conservative about your choices.
[56:28.940 --> 56:32.780]  Now I just want to leave you with a little fun example.
[56:32.800 --> 56:36.380]  We talked right at the beginning about the mobile problem.
[56:36.540 --> 56:38.780]  You've got your driverless car, it's got a hard disk in it.
[56:38.780 --> 56:40.560]  You've got your drone, it's got a hard disk in it.
[56:40.560 --> 56:42.480]  You've got your laptop, it's got a hard disk in it.
[56:42.480 --> 56:45.200]  We have some cautionary tales from the last few years
[56:45.200 --> 56:48.400]  about people who allowed their data to be taken from them
[56:48.400 --> 56:51.480]  while they were using it, and it didn't end well for them.
[56:51.480 --> 56:54.920]  In particular, on the left, Ross Ulbricht,
[56:54.920 --> 56:58.480]  founder of the Silk Road darknet market.
[56:58.480 --> 57:00.360]  On the right, a more recent example,
[57:00.360 --> 57:04.040]  Aleksandr Kazevs, the founder and operator of AlphaBay.
[57:04.100 --> 57:06.380]  They were both captured by law enforcement
[57:06.380 --> 57:08.820]  while they were using their laptops.
[57:08.820 --> 57:11.700]  So their laptop, even though it was encrypted, it was unlocked.
[57:11.700 --> 57:15.500]  All of their data was recovered.
[57:15.720 --> 57:17.180]  Very bad for them.
[57:17.180 --> 57:21.360]  Ross is in prison in the United States serving a life sentence.
[57:22.220 --> 57:24.260]  Kazevs is dead.
[57:24.260 --> 57:27.000]  He died within a few days of his arrest
[57:27.000 --> 57:30.620]  under uncertain circumstances in prison in Bangkok.
[57:30.840 --> 57:31.740]  No good.
[57:31.740 --> 57:34.180]  So I want to leave you with this little thought experiment
[57:34.180 --> 57:39.480]  about destroying your mobile data in case you get apprehended.
[58:22.780 --> 58:36.260]  It would be very easy for us to make a little Bluetooth low energy wristband
[58:36.260 --> 58:39.560]  or something, and something else to put in the machine.
[58:39.600 --> 58:43.720]  Proximity sensor, if you're separated from your machine.
[58:54.060 --> 58:55.360]  Thank you.
